MWMon: A Software Defined Network-based Malware Monitor

다국어 초록 (Multilingual Abstract)

An antivirus is a widely used solution for detecting malicious softwares in client devices. The performance of antivirus solutions in the mobile client environment is critical due to its resource constrains. Many solutions light-weighting client"s overhead in the mobile client environment have been developed. However, most solutions require platform modifications or software installations and it decreases their realizations in practice. In this paper, we propose a solution detecting malwares on networks using the Software Defined Network (SDN). Our main goal is designing a solution detecting malwares of mobile client without involving the client into the work. We contribute to provide a solution that does not require client-side installations or modifications and so is easily applicable in practice.

목차 (Table of Contents)

• Abstract
• 1. Introduction
• 2. Related Works 1: The Research for Security Using SDN
• 3. Related Works 2: Antivirus Solution In a Lightweight Client Environment
• 4. MWMon(Malware Monitor)
• 5. Conclusion
• References

참고문헌 (Reference)

1 조민재, "시그니처 기반 안티 바이러스 성능 향상 기법에 대한 연구" 한국산업정보학회 20 (20): 65-72, 2015

2 "VirusTotal"

3 "VirusChief"

4 Jarabek, Chris, "Thinav : Truly lightweight mobile cloudbased anti-malware" 209-218, 2012

5 차상길, "SplitScreen: Enabling Efficient, Distributed Malware Detection" 한국통신학회 13 (13): 187-200, 2011

6 R. Skowyra, "SoftwareDefined IDS for Securing Embedded Mobile Devices"

7 AY Ding, "Software defined networking for security enhancement in wireless mobile networks" 66 : 94-101, 2014

8 K. Yap, "Separating authentication, access and accounting: A case study with OpenWiFi" Open Networking Foundation, Tech. Rep. 2011

9 "SDN wiki"

10 S. Scott-Hayward, "SDN Security: A Survey" 1-7, 2013

11 Min Jae Jo, "Performance Enhancement of malware detection in the lightweight client environment" Sejong University 2015

12 J. H. Jafarian, "Openflow random host mutation:transparent moving target defense using software defined networking" 127-132, 2012

13 Lara, Adrian, "OpenSec: A framework for implementing security policies using OpenFlow" 781-786, 2014

14 N. McKeown, "OpenFlow : Enabling Innovation in Campus Networks" 38 (38): 69-74, 2008

15 "McAfee Report"

16 Abaid, Zainab, "MalwareMonitor: An SDN-based Framework for Securing Large Networks" 40-42, 2014

17 B. Wang, "Malware detection for mobile devices using software-defined networking" 81-88, 2013

18 Bates A, "Let SDN be your eyes : Secure forensics in data center networks" 2014

19 "Kaspersky"

20 V. Van der Veen, "Dynamic Analysis of Android Malware"

21 Wu. D. J, "Droidmat: Android malware detection through manifest and api calls tracing" 62-69, 2012

22 S. Shin, "CloudWatcher: Network security monitoring using OpenFlow in dynamic cloud networks (or: How to provide security monitoring as a service in clouds?)" 1-6, 2012

23 Oberheide, Jon, "CloudAV : NVersion Antivirus in the Network Cloud" 91-106, 2008

24 "ClamAV"

25 L. von Ahn, "CAPTCHA : Using Hard AI Problems for Security" 2656 : 294-311, 2003

26 E. Chin, "Analyzing inter-app lication communication in Android" 239-252, 2011

27 Eun Jun Yoon, "An Intrusion Detection System Using Pattern Classification" 2002

28 Hyun Chul Cha, "A Solution for Timing Gap Problems on Network Intrusion Detection Systems" 7 (7): 1-6, 2001

29 Jae Min Son, "A Scheme for Protecting Security Rules in Intrusion Detection System" 8 (8): 8-16, 2003

30 S. Lim, "A SDN-oriented DDoS blocking scheme for botnet-based attacks" 63-68, 2014